depot/third_party/nixpkgs/pkgs/tools/system/osquery/default.nix

110 lines
2 KiB
Nix

{
lib,
cmake,
fetchFromGitHub,
fetchzip,
fetchurl,
git,
perl,
python3,
stdenv,
stdenvNoCC,
ninja,
nix-prefetch-git,
autoPatchelfHook,
jq,
removeReferencesTo,
nixosTests,
writers,
}:
let
info = builtins.fromJSON (builtins.readFile ./info.json);
opensslSrc = fetchurl info.openssl;
toolchain = import ./toolchain-bin.nix {
inherit
stdenv
lib
fetchzip
autoPatchelfHook
;
};
in
stdenvNoCC.mkDerivation rec {
pname = "osquery";
version = info.osquery.rev;
src = fetchFromGitHub info.osquery;
patches = [
./Remove-git-reset.patch
];
nativeBuildInputs = [
cmake
git
perl
python3
ninja
autoPatchelfHook
jq
removeReferencesTo
];
postPatch = ''
substituteInPlace cmake/install_directives.cmake --replace "/control" "control"
'';
configurePhase = ''
mkdir build
cd build
cmake .. \
-DCMAKE_INSTALL_PREFIX=$out \
-DOSQUERY_TOOLCHAIN_SYSROOT=${toolchain} \
-DOSQUERY_VERSION=${version} \
-DCMAKE_PREFIX_PATH=${toolchain}/usr/lib/cmake \
-DCMAKE_LIBRARY_PATH=${toolchain}/usr/lib \
-DOSQUERY_OPENSSL_ARCHIVE_PATH=${opensslSrc} \
-GNinja
'';
disallowedReferences = [ toolchain ];
postInstall = ''
rm -rf $out/control
remove-references-to -t ${toolchain} $out/bin/osqueryd
'';
passthru = {
inherit opensslSrc toolchain;
tests = {
inherit (nixosTests) osquery;
};
updateScript = writers.writePython3 "osquery-update" {
makeWrapperArgs = "--prefix PATH : ${lib.makeBinPath [ nix-prefetch-git ]}";
} (builtins.readFile ./update.py);
};
meta = with lib; {
description = "SQL powered operating system instrumentation, monitoring, and analytics";
homepage = "https://osquery.io";
license = with licenses; [
gpl2Only
asl20
];
platforms = platforms.linux;
sourceProvenance = with sourceTypes; [ fromSource ];
maintainers = with maintainers; [
znewman01
lewo
squalus
];
};
}